Guest-controlled out-of-bounds read/write on x86_64 in wasmtime
CVE-2023-26489
What is CVE-2023-26489?
The Wasmtime runtime for WebAssembly contains a vulnerability in its Cranelift code generator on x86_64 targets. The bug results from an incorrect computation of the effective address during load/store operations, allowing memory access up to 34GB away from the base of linear memory. This exploit could enable a malicious WebAssembly module to read or write memory belonging to other instances, potentially leading to intrusions into sensitive data spaces. Users are encouraged to update to patched versions or implement workarounds to ensure memory access is correctly bounded, as notable performance impacts may result from these configurations.
Affected Version(s)
wasmtime cranelift-codegen: >= 0.84.0, < 0.91.1 < cranelift-codegen: 0.84.0, 0.91.1
wasmtime cranelift-codegen: >= 0.92.0, < 0.92.1 < cranelift-codegen: 0.92.0, 0.92.1
wasmtime cranelift-codegen: >= 0.93.0, < 0.93.1 < cranelift-codegen: 0.93.0, 0.93.1